← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-24693
WordPress Advanced Notifications plugin <= 1.2.7 - Broken Access Control vulnerability
CVE-2025-24661
WordPress Taxi Booking Manager for WooCommerce plugin <= 1.1.8 - PHP Object Injection vulnerability
CVE-2025-24642
WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability
CVE-2025-24652
WordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerability
CVE-2025-24647
WordPress WooCommerce Cloak Affiliate Links plugin <= 1.0.35 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24641
WordPress Better WishList API plugin <= 1.1.3 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24633
WordPress Build Private Store For Woocommerce plugin <= 1.0 - Broken Access Control vulnerability
CVE-2025-24600
WordPress RSVPMaker plugin <= 11.4.5 - Broken Access Control vulnerability
CVE-2025-24583
WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability
CVE-2025-24574
WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability